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1 Backtra cking intrusions 

Samuel T. King, Peter M. Chen 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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In 1998 and again in 1999, the Lincoln Laboratory of MIT conducted a comparative 
evaluation of intrusion detection systems (IDSs) developed under DARPA funding. 
While this evaluation represents a significant and monumental undertaking, there are 
a number ... 
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Analyzing intrusions today is an arduous, largely manual task because system 
administrators lack the information and tools needed to understand easily the 
sequence of steps that occurred in an attack. The goal of BackTracker is to identify 
automatically ... 
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Computer security is severely threatened by software vulnerabilities. Prior work 
shows that information flow tracking (also referred to as taint analysis) is a 
promising technique to detect a wide range of security attacks. However, current 
information ... 
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In recent years, web applications have become tremendously popular, and nowadays 
they are routinely used in security-critical environments, such as medical, financial, 
and military systems. As the use of web applications for critical services has 
increased, ... 
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Our Application Security Monitor (ASM) is a run-time monitor that dynamically 
collects execution-related data. ASM is part of a security framework that will allow us 
to explore different security policies aimed at identifying malicious behavior ... 
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